Control

Control

Configure FortiNAC to automatically provision the appropriate network access to connecting endpoints, including blocking non-authorized access.

Wired Networks	1. Configure Enforcement Groups. Follow the instructions in the Enforcement Groups cookbook. 2. Follow the instructions in the appropriate integration document below to configure the network device and the corresponding FortiNAC models. FortiSwitch FortiGate Endpoint Management Fortinet Security Fabric/FSSO Cisco Meraki Switch/Router IP Phones 3. Enable enforcement (also called “Go Live”). This step enables FortiNAC to automatically provision network access. Follow the instructions in the Enable Enforcement on Wired Network cookbook.
Captive Portal	Configure Captive Portal (optional): Portal pages that non-authorized network users encounter when their devices are blocked from network access (isolated). See Portal Configuration in the Administration Guide. Related Cookbooks Hide Download Button in Captive Portal Create Custom Use Policy for Captive Portal
Wireless Networks	Follow the instructions in the appropriate integration document below to configure the network device and the corresponding FortiNAC models. FortiWLC FortiAP AeroHive Aruba Controller Aruba IAP Cambium Cisco Meraki MR Cisco WLC ExtremeCloud/Aerohive Huawei Mist Ruckus Smart Zone Ubiquiti
VPN	Follow the instructions in the appropriate integration document below to configure the network device and FortiNAC. Cisco ASA VPN FortiGate VPN Palo Alto Networks

Control

Configure FortiNAC to automatically provision the appropriate network access to connecting endpoints, including blocking non-authorized access.

Wired Networks

1. Configure Enforcement Groups. Follow the instructions in the Enforcement Groups cookbook.

2. Follow the instructions in the appropriate integration document below to configure the network device and the corresponding FortiNAC models.

FortiSwitch

FortiGate Endpoint Management

Fortinet Security Fabric/FSSO

Cisco Meraki Switch/Router

IP Phones

3. Enable enforcement (also called “Go Live”). This step enables FortiNAC to automatically provision network access. Follow the instructions in the Enable Enforcement on Wired Network cookbook.

Captive Portal

Configure Captive Portal (optional): Portal pages that non-authorized network users encounter when their devices are blocked from network access (isolated). See Portal Configuration in the Administration Guide.

Related Cookbooks

Hide Download Button in Captive Portal

Create Custom Use Policy for Captive Portal

Wireless Networks

Follow the instructions in the appropriate integration document below to configure the network device and the corresponding FortiNAC models.